[Important] [Security] Virtuozzo ReadyKernel Patch 165.1 for Virtuozzo Hybrid Server 7.5

Issue date: 2023-12-19

Applies to: Virtuozzo Hybrid Server 7.5

Virtuozzo Advisory ID: VZA-2023-043

1. Overview

The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5.

2. Security Fixes

  • [Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] ext4/mfsync: A BUG_ON occurred if a wrong set of files was provided. (VSTOR-78331)

  • [Important] [3.10.0-1160.53.1.vz7.185.3 to 3.10.0-1160.90.1.vz7.200.7] An issue in the IGB driver caused a buffer size to be inadequate for frames larger than the MTU. (CVE-2023-45871)

3. Installing the Update

Download, install, and immediately apply the patch to the current kernel by running readykernel update.